BoxyStudio records
13 published records for vendor boxystudio.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 23.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-502 Deserialization of Untrusted Data1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
45Plan | CVE-2022-3900No exploit | Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injectionboxystudio · cooked · CWE-502 | Critical9.8 | — | 19.0% | Dec 12, 2022 |
40Plan | CVE-2024-49291No exploit | WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerabilitygora tech llc · cooked pro · CWE-434 | Critical10.0 | — | 0.5% | Oct 17, 2024 |
35Monitor | CVE-2024-39679No exploit | WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Resetboxystudio · cooked · CWE-352 | High8.8 | — | 0.4% | Jul 17, 2024 |
35Monitor | CVE-2024-39678No exploit | WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDsboxystudio · cooked · CWE-352 | High8.8 | — | 0.4% | Jul 17, 2024 |
35Monitor | CVE-2024-39680No exploit | WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Saveboxystudio · cooked · CWE-352 | High8.8 | — | 0.4% | Jul 17, 2024 |
35Monitor | CVE-2024-39681No exploit | WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipesboxystudio · cooked · CWE-352 | High8.8 | — | 0.4% | Jul 17, 2024 |
35Monitor | CVE-2024-49290No exploit | WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerabilityboxystudio · cooked · CWE-352 | High8.8 | — | 0.2% | Oct 20, 2024 |
30Monitor | CVE-2022-36399No exploit | WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposureboxystudio · booked · CWE-200 | High7.5 | — | 0.5% | Dec 28, 2023 |
25Monitor | CVE-2021-24233No exploit | Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)boxystudio · cooked · CWE-79 | Medium6.1 | — | 1.7% | Apr 22, 2021 |
21Monitor | CVE-2024-37308No exploit | WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerabilityboxystudio · cooked · CWE-79 | Medium5.4 | — | 0.4% | Jun 13, 2024 |
21Monitor | CVE-2023-44477No exploit | WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)boxystudio · cooked · CWE-79 | Medium5.4 | — | 0.4% | Oct 2, 2023 |
21Monitor | CVE-2024-41816No exploit | WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcodeboxystudio · cooked · CWE-79 | Medium5.4 | — | 0.4% | Aug 5, 2024 |
21Monitor | CVE-2024-39682No exploit | WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerptboxystudio · cooked · CWE-116 | Medium5.4 | — | 0.4% | Jul 17, 2024 |
- CVE-2022-390045Plan
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
CriticalCVSS 9.8No exploitEPSS 19%boxystudio · cookedDec 12, 2022
- CVE-2024-4929140Plan
WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability
CriticalCVSS 10.0No exploitEPSS 1%gora tech llc · cooked proOct 17, 2024
- CVE-2024-3967935Monitor
WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset
HighCVSS 8.8No exploitEPSS 0%boxystudio · cookedJul 17, 2024
- CVE-2024-3967835Monitor
WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs
HighCVSS 8.8No exploitEPSS 0%boxystudio · cookedJul 17, 2024
- CVE-2024-3968035Monitor
WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save
HighCVSS 8.8No exploitEPSS 0%boxystudio · cookedJul 17, 2024
- CVE-2024-3968135Monitor
WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes
HighCVSS 8.8No exploitEPSS 0%boxystudio · cookedJul 17, 2024
- CVE-2024-4929035Monitor
WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%boxystudio · cookedOct 20, 2024
- CVE-2022-3639930Monitor
WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 1%boxystudio · bookedDec 28, 2023
- CVE-2021-2423325Monitor
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 2%boxystudio · cookedApr 22, 2021
- CVE-2024-3730821Monitor
WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability
MediumCVSS 5.4No exploitEPSS 0%boxystudio · cookedJun 13, 2024
- CVE-2023-4447721Monitor
WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%boxystudio · cookedOct 2, 2023
- CVE-2024-4181621Monitor
WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%boxystudio · cookedAug 5, 2024
- CVE-2024-3968221Monitor
WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt
MediumCVSS 5.4No exploitEPSS 0%boxystudio · cookedJul 17, 2024